Privacy Policy
Last updated: March 2026
Introduction
Conxera is operated by Conxera Limited, which is committed to protecting personal data in accordance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.
Data Controller
Conxera Limited is the data controller for personal data processed in connection with the Service.Email: privacy@conxera.com
Data We Collect
We may collect the following categories of personal data: Account Data — such as name, email address, job title, and user role Organisation Data — such as company profile details and organisation settings Tender Materials — including uploaded documents, generated outputs, and related working files Usage Data — such as logs, feature interactions, and activity history Technical Data — such as IP address, browser type, device information, and diagnostic data Billing Data — such as subscription plan details and Stripe customer or payment identifiers
Legal Basis
We process personal data on the following legal bases, as applicable: performance of a contract legitimate interests compliance with legal obligations consent, where required
How We Use Data
We use personal data to: operate and provide the platform generate tender-related outputs provide customer support manage subscriptions and billing improve the Service and develop new features monitor performance, prevent abuse, and maintain security
Sharing of Data
We may share personal data with trusted third parties where necessary to operate the Service, including: hosting and infrastructure providers AI and document processing providers payment processors such as Stripe professional advisers regulators, courts, or legal authorities where required We do not sell personal data.
International Transfers
Where personal data is transferred outside the UK, we take appropriate steps to ensure lawful safeguards are in place.
Data Retention
We retain personal data for as long as necessary to provide the Service and fulfil legitimate business and legal purposes. Where an account is closed or terminated, data is deleted or anonymised within a reasonable period, typically within 90 days, unless longer retention is required by law or for legitimate legal, regulatory, or security reasons.
Your Rights
Subject to applicable law, you may have the right to request: access to your personal data correction of inaccurate data deletion of your data restriction of processing data portability objection to processing To exercise any of these rights, contact: privacy@conxera.com
Security
We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
Children
The Service is not intended for individuals under the age of 18, and we do not knowingly collect personal data from children.
Complaints
If you have concerns about how we handle your personal data, you can contact us first at privacy@conxera.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk
Contact
For privacy-related questions, contact: privacy@conxera.com
For legal enquiries, contact: legal@conxera.com